CVE-2004-1660

概要

参考情報

• seclists.org/lists/bugtraq/2004/Sep/0014.html · Exploit
• secunia.com/advisories/12432 · Exploit
• 7a69ezine.org/node/view/130 · Vendor Advisory
• exchange.xforce.ibmcloud.com/vulnerabilities/17288

cutenews のその他の脆弱性

• CVE-2020-5558高 8.8CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.
• CVE-2020-5557中 6.1Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
• CVE-2019-11447高 8.8An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile ar…
• CVE-2009-4250中 4.3Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allow remote attackers to inject …
• CVE-2009-4249低 2.6Multiple cross-site scripting (XSS) vulnerabilities in CutePHP CuteNews 1.4.6, when register_globals is enabled and magic_quotes_gpc is disa…